Skip to content

Releases: CatoTH/antragsgruen

v4.15.0

30 Nov 10:36
074c85c
Compare
Choose a tag to compare
  • Several improvements for user account administration:
    • User accounts can now be protected using Two-Factor-Authentication through TOTP. For individual users or all users of dedicated installations, this can be enforced.
    • Admins can now delete user accounts.
    • Admins can now prevent specific user accounts from changing their password, e.g. if it is supposed to be a shared user account where admins manage the password.
    • Admins can now enforce users to change their password the first / next time they log in.
    • Admins can now disable the functions for users without access to a consultation to request access.
    • Users that didn't receive the initial account confirmation e-mail can now request another confirmation e-mail after an hour.
  • When going to the Terms and Conditions and/or the Privacy page and back, you will end up in the same consultation than before now.
  • Custom input fields in motion forms can now have explanations. They can also be set to be "encouraged but not required" - that is, the user can skip them but will get a warning if they do so.
  • Content pages can now have attached files, just like the welcome text on the home page.
  • Access to content pages can now be restricted to logged in users, admins or specific user groups.
  • When merging amendments into a motion, the default setting now is to create a resolution, not a new motion.
  • Security improvement: When logging in, and a new verion of PHP (like 8.4) suggests a stronger default password hashing, the stored hash is updated accordingly.
  • A new translation is provided: Montenegrin (thanks to Danilo Boskovic)
  • Administrators of an installation can modify the behavior of the CAPTCHAs on registration (see README).
  • Some compatibility issues with PHP 8.4 were resolved.
  • Bugfix: Tabular data was not encoded correctly in the PHP-based PDF export.
  • Bugfix: The setting to open (PDF-)files in new browser tabs was not considered at several places.
  • Bugfix: The PDF with all amendments embedded into the motion text could not be generated if a Weasyprint-based PDF layout was selected.
  • Bugfix: If a motion with a proposed modified version was copied, merging that proposed version was not possible anymore.
  • Bugfix: It was possible for users to submit amendments for withdrawn motions.
  • Bugfix: When using "previous / next motion" links for pagination, motions and resolutions were not properly separated.
  • Bugfix: Some Youtube-Videos could not be embedded.
  • Bugfix: When copying a consultation with motion types whose permissions were restricted to a specific user group, these permissions where not properly copied.
  • Bugfix: If an uploaded logo was deleted, the shown logo was broken instead of falling back to the default logo.

v4.14.2

08 Sep 12:00
eb5a126
Compare
Choose a tag to compare
  • Security advisory x41-2024-002:
    • Illegitimate content could be stored in the motion reason. (Credit: X41 D-Sec GmbH, Eric Sesterhenn)
    • Redirects to external pages could be injected. (Credit: X41 D-Sec GmbH, Eric Sesterhenn)
    • E-Mail verification after signup could be bypassed. (Credit: X41 D-Sec GmbH, Yassine El Baaj)
    • E-Mail verification after e-mail change could be bypassed. (Credit: X41 D-Sec GmbH, Yassine El Baaj, JM)
  • Bugfix: The PDF-export of all amendments was not working.
  • Bugfix: The PDF-export of amendments with proposed procedure was not working when using Weasyprint.

Thanks to X41 D-SEC GmbH for reporting the security issues.

v4.14.1

25 Aug 15:40
da16e09
Compare
Choose a tag to compare
  • If a filter is set in the motion list, this will also filter the motions to be exported in the export row above (PDFs, ODTs, ODS etc.).
  • Setting a modified proposed procedure is now more streamlined, as changing the proposed status to "Accepted (modified)" now directly brings one to entering the modified text, and saving it will lead back to the motion / amendment.
  • Bugfix: The PDF export with included proposed procedures was sometimes broken.
  • Bugfix: Publishing proposed procedures from the admin list only worked for amendments, not for motions.
  • Bugfix: When multiple versions of a motion exist, the ODT / PDF export list showed all versions, instead of only the newest one.
  • Bugfix: If a motion replaces one of a different consultation, editing as an admin removed the connection between these two motion versions.
  • Bugfix: Merging amendments into a motion was broken if the motion's proposed status had a proposed change but then changed to another proposed status.

v4.14.0

20 May 09:20
aecb312
Compare
Choose a tag to compare
  • A new default motion type template exists, "progress report". It includes a resolution and a progress section. The latter can be edited inline from the document view by administrative users. An editorial group of user can be defined that has permissions to edit these progress report section without having any other addition administrative privileges.
  • Super-admins can now change the e-mail-address / logins of registered users, not only their passwords.
  • If the home page layout "Tags" is used, it is now possible to show only the list of tags, and the actual motions on tag-specific sub-pages. This is mostly aimed towards consultations with hundreds of motions.
  • Optionally, "previous motion" and "next motion" links can be activated on motions, to enable browsing through the motions without having to go back to the home page.
  • The admin motion list can now be filtered by motion type.
  • For list votings where a number of options are presented to vote on and delegates can choose which one to vote for, there is now also an option to allow an explicit "General Abstention" to explicitly vote for none of the given options.
  • Exporting "Inactive" motions and amendments from the admin motion list now also includes unpublished items.
  • Users can be assigned a voting weights, for example if they represent multiple delegates. If so, their vote counts as multiple votes.
  • For creating motions and/or amendments, the two options to create it as single delegate or organization can new each be restricted to specific user groups.
  • The custom theme editor now also allows to (un)set the boldess, upper-casing and text shadows of headings.
  • For newly created application motion types, the signature is now optional and the gender field is not automatically generated anymore.
  • It is now possible to set no agenda item for motions.
  • Redis support for caching is now bundled in the default Antragsgrün distribution, so no need to manually install packages anymore. The setup can be done in the config.json.
  • LaTeX will be deprecated for rendering PDFs. Instead, a new rendering based on Weasyprint is introduced, that should handle several edge cases better and will make it easier to customize PDF layouts. The default PHP-based PDF renderer will remain unchanged.
  • The internal caching system has been optimized, preventing parallel processes generating the same cache, which might overload systems with a high number of users after cache invalidation.
  • For very large consultations (1.000 motions/amendments or more), setting the viewCacheFilePath option in config.json now optimizes several aspects and is an officially recommended setting.
  • Bugfix: Some texts were not properly escaped, allowing XSS by consultation admins.
  • Bugfix: The "Allow more supporters than required" could not be deactivated for support collection phases before publication.
  • Bugfix: Several issues with the predefined organisation list for user administration were fixed.
  • Bugfix: CAPTCHAs were sometimes hardly readable.
  • Bugfix: In the support collecting page, for amendments, the required supporters of motions were shown, not of amendments.

v4.13.2

18 Feb 13:14
4d0f01a
Compare
Choose a tag to compare
  • New translations are provided: Dutch (thanks to m-rtijn and MickVolt) and Catalan (thanks to gtriasg and reixacu).
  • Bugfix: the version check in the editor that lead to warnings is now disabled.
  • Bugfix: The list of previous speakers was not expandable.
  • Bugfix: In rare cases, the sorting of motions on the home page was not working properly.
  • Bugfix: The new shortcut to create amendments for one paragraph section directly from the motion had problems when two lists came right next to each other.

v4.13.1

09 Dec 08:47
06ddd03
Compare
Choose a tag to compare
  • As admin, is now possible to edit the list of internal (proposed procedure) tags, just like the public ones.
  • Proposed procedure tags can now be assigned directly in the procedure overview page.
  • As admin, it is possible to deactivate private notes on the site.
  • If amendments are set up to be restricted to one paragraph, then each paragraph in the motion now shows a direct link to the amendment creation page, with that paragraph pre-selected.
  • It can be set up so that external links and PDF-links will be opened in new, blank browser tabs/windows.
  • Security: Consultation admins could grant privileges to other consultations within the same site.
  • The backlinkt on the "my account" page leads to the consultation where the user was coming from.
  • Admins can now download Excel/XLSX-exports of amendments and the comments to motions.
  • Motions and amendment in the "My motions" section of the home page are now sorted by prefix.
  • Bugfix: When resolutions were shown on a separate page, title prefixes / motion signatures were shown.
  • Bugfix: Motion history might also show changes of invisible motions.
  • Bugfix: Comparing motion versions did not show changes in titles.
  • Bugfix: If a motion section was removed from a motion type that already had motions, then amendments to this motion could not be merged individually anymore.
  • Bugfix: If a voting block was deleted with motions/amendments assigned to it, then these motions/amendments could not be assigned to new voting blocks anymore.
  • Bugfix: If a motion had an empty optional section, amendments adding text to that section were breaking the motion view.
  • Bugfix: Copying a motion with amendments amending another amendment to another consultation was breaking the assignments between the amendments.
  • Bugfix: The first line of an amendment was determined incorrectly if the first change was in the second or later amendable motion section.

v4.13.0

29 Oct 07:48
1ad906f
Compare
Choose a tag to compare
  • WARNING: if you are using a PHP 7.4 or older, then update to PHP 8.0 or newer first before installing this update!
  • For larger consultations using the Speaking Lists, there is now a separate live server component, allowing real-time updates of the speaking lists at reduced load on the server. As it runs on Java, it is not compatible with "traditional" webhosting. Sites running on antragsgruen.de / discuss.green are getting the real-time update feature automatically.
  • It is now possible to copy/duplicate a motion within a consultation.
  • When editing a motion or amendment as admin, it is possible to set the status to "Obsoleted by another amendment" or "Obsoleted by another motion" and specify which one it is in a dropdown.
  • When creating a new consultation based on an existing one, it is now possible to choose if motion types, tags and/or user permissions are to be copied from the existing consultation or not.
  • When a list of organisations is specified in the consultation settings, this list is shown as a drop-down when creating / inviting new users.
  • The list of resolutions made during a consultation, which is by default listed above the motion list on the home page, can now be put onto a separate page - or replace the motion list, moving the motion list to a separate page.
  • The list of tags / topics can now be re-ordered and existing tags can be renamed.
  • When choosing "Tags / categories" as home page layout, then the consolidated category-list at the top can now be deactivated.
  • It can now be set up so that the modified version proposed as part of a proposed procedure is shown inline as part of the motion.
  • Besides of exporting all motions as a ZIP-file containing single ODT files, a single ODT file containing all motion texts can now be exported.
  • When a new version of a motion is created during merging amendments (in contrast to a resolution being created), the status of the new motion version can be explicitly specified.
  • The ODT export now also supports numbered lists.
  • The motion list can now be filtered for To Do items (that is, motions/amendments that need to be screened) and also shows the To Do action for items on that list as part of the Status.
  • The motion list now persists its filter and sort settings for each user session, until changed or reset.
  • If an amendment is set to show the full text by default, this now also affects the PDF export.
  • Merging a single amendment into a motion now also handles amendments only changing the title of the motion.
  • The maintenance mode page is now specific to a consultation; that is, delegates bookmarking a link to a consultation that is still in maintenance mode can open that bookmark later and get to theat very consultation, not the generic home page.
  • On single-site instances, user registration can be disabled altogether by setting the allowRegistration key in config.json to false.
  • Bugfix: If a draft of a revised motion (by merging amendments) existed and the motion list was opened, the original motion was not shown anymore by default.
  • Bugfix: Some edge cases around uploaded logos breaking the PDF export or not being shown on the page were resolved.
  • Bugfix: Super-admins could lock themselves out of protected consultations.
  • Bugfix: Putting a active speaker back into the speaking waiting list did not work - the speaker vanished from the list completely.
  • Bugfix: Closing the full screen mode of a speaking list was leading to an error page.
  • Bugfix: If not-logged-in users are allowed to support motions/amendments, they showed up as empty bullet points in the supporter list. Now they have to enter their name.
  • Bugfix: The delete button in the admin motion list was shown even if no delete permissions were granted and it was therefore non-functional.
  • Bugfix: If a motion collecting supporters was edited by an admin, then no publication mail was sent later when it was actually published.
  • Bugfix: The login screen shows the correct consultation in the breadcrumb links.

v4.12.0

29 May 06:15
56cb3f0
Compare
Choose a tag to compare
  • User groups are now more powerful administrational tools:
    • User groups can now receive admin rights for specific administrational tasks.
    • These tasks can be restricted to a subset of motions, like motions of a specific type, agenda item or tag.
    • User groups can be allowed to only see and read incoming unpublished motions, without any editing rights.
    • User groups can now be renamed.
  • Super admins (registered in the config.json) can now perform more user administration using the UI, like setting the name, organization and new passwords for registered users.
  • The number of votes users can cast on a voting session can be limited. It is thus possible to present a list of motions or candidates and have the users choose up to that specified number of them.
  • For the proposed procedure, it is now possible to set the status "Accepted (Modified)" for motions too and to specify a modified version of it to accept. Previously, this was only possible for amendments.
  • A new motion versioning system is implemented, replacing just using the signatures for versioning. Instead of "M1new2", the signature will now remain the same but the version is saved separately.
  • In the admin motion list, replaced motions are now hidden by default if the newer version is also shown. Tn additional filter gives the option to show all versions of a motion in the list.
  • Motion sections can now be set up to hold Right-to-Left text, like Farsi, Hebrew or Arabic.
  • The date format can be set independently from the language. Also the date format yyyy-mm-dd is supported (besides dd/mm/yyyy, mm/dd/yyyy, dd.mm.yyyy).
  • It is possible for admins to create tags for a consultation but disallow proposers of motions to specify these tags themselves.
  • Admins can add additional proposers of a motion or amendment.
  • When merging amendments into motions or in the motion admin view, admins can write a protocol that can be public or not.
  • In tabular data sections of motions / applications, as an admin it is now possible to present a SELECT box with pre-defined options for the proposer to choose from.
  • Personal comments written by users to motions / amendments are now indicated on the home page to the respective user.
  • It is possible to set up PDFs and exports of motions / amendments so that the proposed procedure is included. This is set up on a per motion type level.
  • If a motion or amendment has more than 50 supports, then only the most recent few are shown by default, with the option to explicitly show all.
  • Internal / Plugins: Additional language variants are now handled as part of the plugin system, not by placing files into messages/ anymore. The latter will stop working with version 4.13.
  • Bugfix: The diff and line splitting did not work properly with grapheme consisting of multiple code points.
  • Bugfix: Changing the amendment text as admin does not clear the motion's view cache in all cases.
  • Bugfix: PHP-based PDF rendering lead to overlapping lines when the text contained nested lines without line numbering.
  • Bugfix: Setting the time of agenda items was not possible in locales using AM/PM.
  • Bugfix: Uploaded logos and background images could not always be shown with enabled maintenance mode.
  • Bugfix: When using "Tags / categories" as the home page layout, the motions were not sorted by prefix.
  • Bugfix: It was impossible to create motions for motion types that had no title section defined.

v4.11.1

10 Dec 17:44
743c6d1
Compare
Choose a tag to compare
  • Bugfix: The fresh installation mode was broken with MariaDB.
  • Speaking lists can now have more than only two sub-queues, e.g. for women, men and diverse speaking lists.
  • Some layout issues regarding votings and speaking lists on small screens and full screen mode were resolved.
  • Initiator-based amendment merging is not in the wizard anymore, as this is hardly ever used, let alone useful.
  • Some minor compatibility issues with PHP 8.1 and 8.2 were resolved.

v4.11.0

27 Nov 18:39
60e101c
Compare
Choose a tag to compare
  • WARNING: if you are using a PHP 7.3 or older, then update to PHP 8.0 or newer first before installing this update!
  • A separate document page can be enabled, allowing to upload multiple files in folders. The documents are visible to all users and can be downloaded individually or all in one as a ZIP.
  • For individual motion types, "amendments based on amendments" can be enabled. They allow users to propose alternative versions of an amendment. This is mainly targetet to statute amendments.
  • Single amendments can now be set to show the full motion text including changes by default, instead of only showing the changed parts of the motion.
  • Speaking lists were improved in a few ways:
    • The speaking list administration is now directly linked from the admin page.
    • It is now possible to remove and reorder speakers.
    • Points of order are supported, always appearing at the top of the speaking list. Optionally they can be enabled even when the list is closed.
    • Admins can deactivate the possibility for users to change the name when applying for a speaking list (also making applying a click quicker).
  • The voting functionality was improved in several ways:
    • Votings can now be reordered.
    • When closing a voting, there is now an additional option to close it without publishing the results right away.
    • A separate voting page can be enabled, showing up in the menu.
    • Votings can have a timer, indicating a countdown to vote. (It is not binding though, it still needs to be closed by hand)
    • Votings can be chosen at the creation wizard of a site or consultation.
    • Newest votings will be shown at the top of the voting list.
  • The full screen projector mode can now also show custom content pages.
  • The full screen projector can be set into a split screen mode, showing two motions / amendments / custom pages next to each other.
  • It is now logged when users are added to or removed from a user group. A log is visible for admins.
  • It is now possible for an admin to show the last edit date of a motion or amendment on the home page.
  • Reading comments can now be restricted to the same user group as writing comments.
  • The comment sections of individual motions or amendments can now be closed without affecting others.
  • Bugfix: setting the maximum number of printed initiators on PDFs was broken.
  • Bugfix: Base statute texts were shown in the "New motions" section in the sidebar.
  • Bugfix: When a consultation was restricted for users and the consultation was not set as the default one, applications to get permission were mis-directed to the default consultation.
  • Bugfix: If an encrypted application PDF cannot be embedded into a "all-in-one" PDF, the error message is now shown on a separate page instead of overlapping the previous application.
  • The plugin system was enhanced to support integrating Single-Sign-On systems, specifically SAML-based ones.
  • The plugin for the Antragsgrün Site used by the german greens now supports restricting permissions to members of specific regional divisions of the party.
  • Vue.JS was upgraded from version 2 to 3